Free Wi-Fi in cafes, hotels, trains and airports is handy, but it also raises a reasonable question: is it safe? The honest answer is that it is safer than it used to be, though not risk-free. Most websites now encrypt traffic, yet fake hotspots and careless habits still cause real problems. Here is a practical guide to using public networks sensibly.
What the real risks are
The main risks are not as dramatic as films suggest. Nobody needs to be a master hacker to cause trouble on a shared network. The common problems are fake hotspots, where someone sets up a network with a believable name such as the cafe’s name plus the word guest; weak or missing encryption on the network itself; and web pages or apps that do not use secure connections properly. The National Cyber Security Centre (NCSC) has long advised caution with sensitive activity on public networks, while noting that the risk is lower when sites use HTTPS.
Confirm the network name before joining
Ask staff for the exact network name and any password. Be suspicious of two networks with nearly identical names, and avoid anything that is not obviously linked to the venue. Turn off the option that automatically joins open networks. On both iPhone and Android this is in the Wi-Fi settings, and it stops your phone connecting to whatever is nearest without asking.
Look for HTTPS and watch for certificate warnings
When a site shows a padlock or begins with https, the content travelling between you and that site is encrypted, even on an open network. If your browser warns that a connection is not private or a certificate is invalid, stop. Do not click through the warning. Also be careful with login pages that appear unexpectedly when you connect. Some venues do use a sign-in page, but a page asking for payment card details or your email password is a red flag. Our guide on how to spot a fake website shows what to check.
Save banking and sensitive tasks for mobile data
If you can, use your phone’s mobile data for online banking, shopping or anything involving personal documents. Mobile data is not inherently perfect, but it avoids a shared network with strangers. If you only have Wi-Fi, keep your actions low risk: reading news, checking maps, streaming.
Do you need a VPN?
A VPN encrypts the connection between your device and the VPN provider, which adds protection on a shared network. It is useful for some people, but it is not a magic shield, and quality varies a lot between providers. We cover the trade-offs in our VPN guide for the UK. For many everyday users, HTTPS, updates and strong sign-in practices matter more than a VPN.
Habits that protect you everywhere
Keep your phone and laptop updated, because updates fix known security holes. Use a password manager so every account has a unique password; our explainer on password managers shows how they work. Turn on two-factor authentication or passkeys for important accounts, which makes a stolen password far less useful. Switch off file sharing and AirDrop-style sharing to everyone while out, and log out of accounts you no longer need.
More in Tech
What to do if you think you were caught out
If you entered a password on a page that felt wrong, change that password at once from a trusted connection, and change it anywhere else you reused it. Check your accounts for sign-ins you do not recognise, and contact your bank immediately if any card details were involved. In the UK, suspicious activity can be reported to Action Fraud. We are not a security service, so for serious incidents take advice from your bank or a qualified professional.
Summary
Public Wi-Fi is fine for casual use when you take a few precautions: verify the network name, trust only HTTPS sites, avoid sensitive tasks, keep software updated and use unique passwords with two-factor protection. These small habits make a big difference.
Common questions
Is hotel Wi-Fi safer than cafe Wi-Fi? Not necessarily. A password helps, but other guests share the same network, so the same precautions apply.
Is a password-protected network always safe? A password usually means the network uses encryption, which is better than an open one, but everyone who knows the password is on the same network. Treat it as shared space.
Should I use my phone as a hotspot instead? Using your own mobile hotspot with a strong password is generally a safer choice for sensitive work than a venue network, though it uses your data allowance. Check your plan before streaming or downloading large files.
What about charging at public USB points? It is a separate risk. Where possible, use your own plug and cable, or a power bank, rather than an unknown public port.
Do I need antivirus on my phone? Mostly, keeping the system updated and installing apps only from official stores is the biggest protection. Laptops may benefit from the built-in security tools already included with Windows or macOS, which are kept up to date automatically.
